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Abstract. We investigate the parameterized computational complexity 
of the satisfiability problem for modal logic and attempt to pinpoint 
relevant structural parameters which cause the problem's combinatorial 
explosion, beyond the number of propositional variables v. To this end 
we study the modality depth, a natural measure which has appeared in 
the literature, and show that, even though modal satisfiability param- 
eterized by v and the modality depth is FPT, the running time's de- 
pendence on the parameters is a tower of exponentials (unless P=NP). 
To overcome this limitation we propose several possible alternative pa- 
rameters, namely diamond dimension, box dimension and modal width. 
We show fixed-parameter tractability results using these measures where 
the exponential dependence on the parameters is much milder than in 
the case of modality depth thus leading to FPT algorithms for modal 
satisfiability with much more reasonable running times. 



1 Introduction 

In this paper we consider the computational complexity of deciding two fun- 
damental logic problems, namely formula satisfiability and formula validity, for 
modal logics, focusing on the standard modal logic K. We attempt to present a 
new point of view on this important topic by making use of the parameterized 
complexity framework, which was pioneered by Downey and Fellows. Although 
the complexity of satisfiability for modal logic has been studied extensively in 
the past, to the best of our knowledge this is the first time this has been done 
from an explicitly parameterized perspective. Moreover, the parameterized com- 
plexity of logic problems has been a fruitful field of research and we hope to 
extend this success to modal logic (some examples are the celebrated theorem of 
Courcelle [3] or the results of [7] ; for an excellent survey on the interplay between 
logic, graph problems and parameterized complexity see [8]). 

Modal logic is a family of systems of formal logic where the truth value of 
a sentence 4> can be qualified by modality operators, usually denoted by □ and 
0- Depending on the specific modal logic and the application one considers, □</> 
and 04> can be informally read to mean, for example, "it is necessary that 0" , 
or "it is known that 0" for □ and "it is possible that <f>" for (}. The fundamental 
normal modal logic system is known as K, while other common variations of this 



logic system include T,D,S4,S5. Modal logic systems provide a diverse universe 
of logics able to fit many modern applications in computer science (for example 
in AI or in game theory), making modal logic a widespread topic of research. 
The interested reader in the recent state of modal logic and its applications is 
directed to [1]. 

As in propositional logic, the satisfiability problem for modal logic is one of 
the most important and fundamental problems considered and many results are 
known about its (traditional) computational complexity. Ladner in [11] showed 
that satisfiability for K, T and S4 is PSPACE-complete, while for S5 the problem 
is NP-complete. Furthermore, in [2] it is shown that satisfiability for K and 
K4 is PSPACE-complete even for formulae without any variables. It should be 
noted that the satisfiability of propositional logic is a subcase of satisfiability 
for any normal modal logic, thus for any normal modal logic the problem is 
NP-hard. Other results are known for multimodal logics; all of the above are 
PSPACE-complete in the multimodal case. In this paper we will focus on normal 
monomodal logics and mainly on K. For an introduction to modal logic and its 
complexity see [10,5]. 

Traditional computational complexity theory attempts to characterize the 
complexity of a problem as a function of the input size n. The notion of param- 
eterized complexity introduces to every hard problem a structural parameter k, 
which attempts to capture the aspect of the problem which causes its intractabil- 
ity. The central notion of tractability in this theory is called fixed-parameter 
tractability (FPT): an algorithm is called FPT if it runs in time 0(f(k) ■ n c ), 
where / is any recursive function and c a constant. For an introduction to the 
vast area of parameterized complexity see [4, 6]. 

Because the definition of FPT allows for any recursive function f(k), fixed- 
parameter tractable problems can have complexities which depend on k in very 
different ways, ranging from sub-exponential to non-elementary. Thus, it is one 
of the main goals of parameterized complexity research to find the best possible 
f(k) for every problem and this will be one of the main concerns of our work. 

Our contribution In this paper we study the complexity of modal satisfi- 
ability and validity from a parameterized, or multi-variate, point of view. Just 
as parameterized complexity attempts to refine traditional complexity theory by 
more specifically identifying the aspects of an intractable problem which cause 
the problem's unavoidable combinatorial explosion, we attempt to identify some 
structural aspects of modal formulae which can have an impact on the solvability 
of satisfiability. 

One natural parameter for the satisfiability problem (in any logic) is the 
number of propositional letters in the formula, which we denote by v. In propo- 
sitional logic, when v is taken as a parameter, the propositional satisfiability 
problem trivially becomes fixed-parameter tractable. As was already mentioned, 
this does not generally hold in the case of satisfiability for modal logics where 
the problem is hard even for constant number of variables. 

On the other hand since the satisfiability problem for modal logics is a gen- 
eralization of the same problem for propositional logics, considering the modal 



satisfiability problem without bounding the number of variables or imposing 
some other propositional restriction on the formulae will result in an intractable 
problem. Although it would be interesting to investigate modal satisfiability 
when certain structural propositional restrictions are placed (for example, we 
could say we are interested in formulae such that removing all modality symbols 
leaves a 2-CNF or a Horn formula, which are tractable cases of propositional sat- 
isfiability) this goes beyond the scope of this work 1 . In this paper we will focus on 
strictly modal structural formula restrictions and therefore we will assume that 
the best way to make propositional satisfiability tractable is to restrict the num- 
ber of variables. For our purposes the conclusion is that for modal satisfiability 
to become tractable, bounding v is necessary but not sufficient. 

Motivated by the above we take the approach of a double parameterization: 
we investigate the complexity of satisfiability and validity when v is considered a 
parameter and at the same time some other aspect contributing to the problem's 
complexity is identified and bounded. 

We first study a natural notion of formula complexity called modality depth 
or modal depth. This complexity measure was already known in [9] where in 
fact a fixed-parameter tractability result was shown when the problem is pa- 
rameterized by the sum of v and the modality depth of the formula. However, 
since parameterized complexity was not well-known at the time, in [9] it is only 
pointed out that the problem is solvable in linear time for fixed values of the 
parameters, without mentioning how different values of v and the depth affect 
the running time. We address this by upper bounding the running time by an 
exponential tower of height equal to the modality depth of the formula. More im- 
portantly, we show a lower bound argument which proves that even though the 
problem is FPT, this exponential tower in the running time cannot be avoided 
unless P=NP (Theorem 2). Our hardness proof follows an approach of encoding 
a propositional formula into a modal formula with very small modality depth. 
This draws a nice connection with previously known lower bound results of this 
form which also use a similar idea to prove the hardness of some (non-modal) 
model checking problems for first and second-order logic ([7] and the relevant 
chapter in [6]). 

This result indicates that modal depth is unlikely to be a very useful parame- 
ter because even for formulae where the depth is very moderate the satisfiability 
problem is still very hard. This begs the natural question of whether there is a 
way to work around the lower bound of Theorem 2 by using another formula 
complexity measure in the place of modal depth. It is worth noting that this is a 
major difference between Theorem 2 and the results of [7] on FO and MSO model 
checking on trees, because in that case the lower bound applies to the problem 
parameterized by the formula size, not its quantifier depth. Since a natural for- 
mula complexity measure would likely be bounded by some simple function of 
the formula size, a search for good formula parameters is very unlikely to bear 
fruit in that case. However, we show that the modal satisfiability case is quite 
different: we define and study several new notions of modal formula complexity 



1 However, see [12] for related (non-parameterized) complexity results 



and show that unlike modality depth, these notions can be used to obtain not 
only fixed-parameter tractability results but also much more reasonable running 
times. 

Specifically, we define the notions of diamond dimension and box dimension 
of a modal formula and show that satisfiability is FPT when parameterized by 
v and the diamond dimension and validity is FPT when parameterized by v and 
box dimension and that in both cases the running times are doubly exponential 
in the parameters. Then we define a measure called modal width and show that 
both satisfiability and validity are FPT when parameterized by v and the modal 
width and the dependence on the parameters is singly exponential. Thus, our 
work points out that trying to solve satisfiability for formulae where our proposed 
measures has a moderate value can be done much more efficiently than by using 
the already known modality depth. All our work focuses on K, but many of our 
results easily carry over to other modal logics without much modification. 

Notation The modal language of logic K contains exactly the formulae that 
can be constructed using the standard propositional operators (A, V, -i) and the 
unary modality operators (□, {>)• Standard Kripkc semantics are considered here: 
a Kripke structure is a set of states W, an accessibility relation R between states 
and a valuation of propositional letters in each state. A modal formula's truth 
value in a state is defined in the usual way, as in propositional logic, with the 
addition of D<j> being true in s iff is true in every accessible state. ()<p is usually 
considered short for -O-i0. Wc implicitly assume that our language includes 
the constants _L and T, for false and true, but these too can also be considered 
shorthand for xA^x and iV^i respectively. When a formula <j> is true (satisfied) 
in a state s of a Kripke structure M we write (M, s) \= </>. A formula <j) is said to 
be satisfiable if there exists a Kripke structure M. and a state s of that structure 
that satisfy the formula. A formula <f) is said to be valid if any Kripke structure 
M and state s of that structure satisfy the formula. 

2 Modal Depth 

In this Section we give the definition of modality depth. As we will see, a fixed- 
parameter tractability result can be obtained when satisfiability is parameterized 
by v and the modality depth of the input formula. This was first observed in 
[9], but in this section we more precisely bound the running time (in [9] it was 
simply noted that the running time is linear for constant depth and constant v 
with a hidden constant which "may be huge" ) . More importantly we show that 
the "huge constant" cannot be significantly improved by giving a hardness proof 
which shows that, if the running time of an algorithm for modal satisfiability 
is significantly less than an exponential tower of height equal to the modality 
depth, then P=NP. 

Definition 1. The modality depth of a modal formula <j) * s defined inductively 
as follows: 

— md{p) = 0, if p is a propositional letter, 



— md(Ofa = md(Dfa = 1 + md(fa, 

— md(fa V fa) — md((j)i A fa) = max{md(0i), md(fa)}, 

— md{-^4>) — md{<p) 

Theorem 1. ([9]) Modal satisfiability and modal validity for the logic K are 
FPT when parameterized by v and md((j)). 

Proof. We define the <i-type of a state s in a Kripke structure Ai to be the 
set {<ft | (M, s) \= (ft and md(0) < d}. We will prove by induction on d that if 
we restrict ourselves to formulae with at most v variables then for any d > 
there are at most f v (d) d- types, where /„ is the function recursively defined: 
/„(0) = 2", f v (n+l) = 2f«W+ v . 

For d = If md((ft) = 0, then the formula is propositional, thus the 0-type of 
any state is directly defined by the set of propositional letters assigned true 
in the state. The number of all such possible sets of variables is 2 V = f v (0). 

For the case of d + 1 The (d+ l)-type of a state s depends on the assignment 
of the propositional letters in s and on the truth values of formulae of the 
forms □</>' and (}(f>' , where md(<ft') < d. Notice that these truth values depend 
only on the set of d- types of the accessible states from s. Thus the number 
of different (d + l)-types on a state s is f v (d + 1) = 2 f " (d ^ +v . 

Now, suppose that (ft is a satisfiable formula of modality depth d > 1. We will 
show how to construct a Kripke structure of about f v (d— 1) states to satisfy (ft. 
To achieve this, for alH £ {0, 1, . . . , d — 1} and for all i-types we will construct 
a state of that i-type, thus in total we will construct = 0{f v {d — 1)) 

states. To construct the f v (0) = 2 V states that give all the different 0-types 
we just construct 2 V states, each with a different valuation of the propositional 
variables. For the subsequent levels, to construct all the states for all the different 
(i + l)-types we pick for each state a set of successor states out of the states 
that give us the different i-types and a valuation of the propositional variables. 
If (ft is satisfiable, it must be satisfiable in this model by adding a new state s, 
selecting a subset of the states that give us the different (d — l)-types to be its 
successors and a valuation of the propositional variables in s. The number of 
combinations of all possible subsets of successors and all variable valuations is 
f v (d), so the problem is solvable in 0(f v (d) ■ f%(d — 1) • \(ft\), because the model 
has 0(f v (d — 1)) states and thus size 0(f%(d — 1)) and model checking can be 
performed in bilinear time. 

Since modal validity is the dual problem of modal satisfiability and negating 
the formula doesn't change its modality depth, the same results hold for this 
problem too. 

Let us now proceed to the main result of this Section, which is that even 
though modal satisfiability is fixed-parameter tractable, the exponential tower 
in the running time cannot be avoided. Specifically, we will show that solving 
modal satisfiability parameterized by modality depth, even for constant v, re- 
quires a running time which is a tower of exponentials with height depending 



on the modality depth. We will prove this under the assumption that P^NP, by 
reducing the problem of propositional satisfiability to our problem. 

Suppose that we are given a propositional CNF formula (f> p with variables 
xi, . . . ,x n and we need to check whether there exists a satisfying assignment 
for it. We will encode <j> p into a modal formula with small depth and a constant 
number of variables. In order to do so we inductively define a sequence of modal 
formulae. 

— In order to encode the variables of <j> p we need some formulae to encode num- 
bers(the indices of the variables). The modal formula v% is defined inductively 
as follows: vq = and v n = Ain =1 § v i where by n, we denote the i-th 
bit of n when n is written in binary and the least significant bit is numbered 
0. So, for example v\ = 0«o, w 2 = ()v\, v 5 = ()v 2 A 0«o = (OO^i) A 0«o an d 
so on. Observe that Vq can only be true in a state with no successor states. 
Also, what is important is that these formulae allow us to encode very large 
numbers using only a very small modality depth and no variables (or just 
one variable if _L is considered short for x A -<x). 

— Next, we need to encode the literals of <p p . The modal formula C{xi) is 
defined as £(xj) = 0«i A Dvi. The formula C(->Xi) is defined as C(->Xi) = 
()vi A ()v a A □ («j V vo). 

— Now, to encode clauses we set C(l\ V h V . . . V Ik) = 

(Ati 0£(ii)) A 

n(V-=i^i))- 

— Finally, to encode the whole formula we use T(c\ Ac 2 A. . .Ac m ) = 0C(ci) 

So far we have described how to construct a modal formula T(<j) p ) from <p p . 
T{4>p) encodes the structure of 4> p . Now we need to add two more ingredients: 
we must describe with a modal formula that 4> p is satisfied by an assignment and 
that the assignment is consistent among clauses. We give two more formulae: 

— S = DO [((0«o) — ► (O^y)) A ((-i<)wo) — > (Oy))], where we have introduced a 
single variable y. 

— CA(n) = Ar=i 000(y A v t ) ~ -000(-y A w<) 

Our full construction is, given a propositional CNF formula </> p with n vari- 
ables named x\, . . . , ir„, we create the modal formula m = T(4> p ) AS h CA(n). 

Lemma 1. <f) p is satisfiable if and only if cj> m is satisfiable in K. 

Proof. Suppose that (f> m is true in a state s of some Kripke structure. Then 
CA{n) is true in s therefore for each i we have either 000(2/ A v{) is true in s or 
000( _, y A Vi) is true in s. From this we create a satisfying assignment: for those 
i for which the first holds we set Xi — T and for the rest Xi = _L. We will show 
that this assignment satisfies <j) p . 

Suppose that it does not, therefore there is some clause Cj which is not satis- 
fied. However, since T^ipp) is true in s there exists a state p with sRp such that 
C(cj) is true in p. In every successor state of p we have that C(lj) is true for some 



literal lj of a and there exists such a state for every literal of Cj. Also, in s we have 
that S is true, therefore in p we have [((0«o) —* A (( _i Owo) - ► (^2/))]- 

Therefore, in some g such that pi?<? we have ((O^o) — > (CHy)) A (( _i Owo) - * (Dj/)) 
and we also have that is true for some literal lj of a. Suppose that lj is a 

negated literal, that is lj = ->Xfc. Then £(Zj) = 0«fc A0«o AD(ufc Vuo)- Therefore, 
since 0«o is true in q this means that D->y is true. Because ()v k and CHy are 
both true in q there exists an r such that qRr and u fc A -ij/ is true in r. But then 
()()()(vk A -ij/) is true in s which implies that our assignment gives the value false 
to Xk- Since Ci contains -*Xk it must be satisfied by our assignment, a contradic- 
tion. Similarly, if lj = Xk then C(lj) = 0«fc A Dvk- Clearly, w and cannot be 
true in the same state for k > therefore in q we have — iO^o which implies Dy. 
Therefore in some r with qRr we have y Avk which implies that our assignment 
sets Xk to true and since Cj has the literal Xk it must be satisfied. 

The other direction is easier. First, we must construct for every Vi a Kripke 
structure to satisfy it. For vo this is a structure with just one state with no 
successors. For v n we take the union of the structures for every m such that 
rii = 1. In this union for all i such that rij = 1 there is a state for which Vi 
is true, call it Sj. We add a state s n and set s n Rsi for all i such that rii = 1. 
Clearly, i> n is true in s n . 

Now the construction of a Kripke structure for <p m is straightforward. We 
take the union of the structures for Vi, with < i < n, thus we have a state 
where Vi is true for every i. For every i with 1 < i < n we create two more 
states: the first has as its only successor the state where Vi is true. The other has 
two successors: the state where Vi is true and the state where i>o is true. Thus, 
for each i we have a state where C{x{) is true and a state where £(->a;,) is true. 
For every clause we create a state and for each literal lj in the clause we add a 
transition to the state where C(lj) is true. Therefore, for each clause c,j we have a 
state where C(q) is true. Finally, we add a state and transitions to all the states 
where some C{ci) is true. Clearly, T{(j> p ) is true in that state, which we call the 
root state. It is not hard to see that CA(n) will also be satisfied independent of 
where y is true, because for every i we have made a unique state pi where Vi is 
true and pi is at distance exactly 3 from the root. 

Take a satisfying assignment; for every Xi which is true set the variable y 
to true in the states of the Kripke structure where Vi is true. Set y to false in 
every other state. Now, we must show that S is true in the root state. This is 
not hard to verify because for every clause in the original formula there is a 
true literal, call it I. If that literal is not negated then in the state where C(l) 
is true we have ->Ovo (because the literal is not negated) and Dy (because the 
literal is true, so its variable is true thus we must have set y to true in the 
variable's corresponding state). Therefore (^()vq — > Dy) A (O^o — ► D^y) is true 
in the literal's corresponding state and [(->()vo — ► Dy) A (0«o — * D^y)] is true 
in the clause's corresponding state. Similar arguments can be made for a negated 
literal. Since we start with a satisfying assignment the same can be said for every 
clause, thus S is also true in the root state. 



Lemma 2. Suppose that <fi p is a propositional CNF formula with n variables. 
Then, if tow(h) > n the formula <f> m = J-(4> p ) ASA CA(n) has modality depth 
at most 4 + h, where tow(h) is the inductively defined function tow(0) = and 
tow{h + l) = 2 tow(h \ 

Proof. First observe that the modality depth of 4> m is at most 3+maxo<i<„ md(wj) 
Therefore, we just have to bound the modality depth of Vi. 

We will use induction on h to show that tow(h) >n=> md(»„) < h + 1. For 
h = we have tow(h) > n =>■ n = 0, therefore md(vo) = 1 and the proposition 
holds. 

Suppose that the proposition holds for h. 

Observe that md(v„) < l+maxo<i<i og n{md(wi)} because writing n in binary 
takes at most logn+1 bits. If we have n < tow(h + l) then logn < tow(h). From 
the inductive hypothesis md(u,) < h + 1 for i < logn. Therefore, md(v n ) < h + 2 
and the proposition holds. 

Theorem 2. There is no algorithm which can solve modal satisfiability in K for 
formulae with a single variable and modality depth d in time f(d) -poly(\<fi\) with 
f{d) = 0(tow(d - 5)), unless P=NP. 

Proof. Suppose that there exists an algorithm A which in time f(d) ■ poly(\<f>\) 
can decide if a modal formula (f> with modality depth d and just one variable 
is satisfiable. We will use this algorithm to solve propositional satisfiability in 
polynomial time. 

Given a propositional CNF formula (f) p we construct <fr m as described, and if 
4> p has n variables let H = min{h \ n < tow(h)}. Then md(0 m ) < H + 4 and of 
course (f> m can be constructed in time polynomial in \<fi p \. Now we can use the 
hypothetical algorithm to see if <f) m is satisfiable. 

We have that f(d) = 0(tow(d — 5)). Therefore, running this algorithm will 
take time f(H+4)-poly(\(f> m \) = 0(tow(H—l)-poly(\(f> m \)). But by the definition 
of H we have tow(H — 1) < n, therefore this bound is polynomial in \4* m \ and 
therefore, also in \<j> p \, which means that we can solve an NP-complete problem 
in polynomial time. 

3 Diamond Dimension 

In this Section we attempt to find some structural characteristics of modal for- 
mulae which will allow us to beat the prohibitive running time of modality depth. 
We define two measures, diamond dimension and box dimension and show how 
they can be used to solve satisfiability and validity respectively with a much 
lower running time than modality depth. 

Definition 2. Let (p be a modal formula in negation normal form, that is, with 
the -i symbol appearing only directly before propositional variables. Then its di- 
amond dimension, denoted by d<>(<^) is defined inductively as follows: 

— d<y(p) = d<>(-ip) = 0, if p is a propositional letter 



- d<> (<£i A 2 ) = d o (0i) + d o (0 2 ) 

- do (0i V 2 ) = max{do(0i),d o (0 2 )} 

- do(D0)=do(0) 

- do (00) = l + d o (0) 

For some intuition, observe that satisfiability becomes easy if we can somehow 
place a small upper bound on the number of states needed in a satisfying model. 
Our goal with this measure is to prove that if do (0) is small then 0's satisfiability 
can be checked in models with few states. This is why the two properties of 
which can increase do (0) are (which requires the creation of a new state) and 
A (which requires the creation of states for both parts of the conjunction). 

Theorem 3. If a modal formula is satisfiable and do (0) < k then there exists 
a Kripke structure with 0(k\) states which satisfies 0. 

Proof. Suppose that there exists a Kripke structure which satisfies 0, that is 
there exists some state s in that structure where holds. We will construct a 
working set of modal formulae S which will satisfy the following properties: 

- All formulae in S hold in s. 

- (/\^. eS 0i) — > is a valid formula. 

- d o (0) > E0 ie s d o(0 4 ). 

We begin with S = {0} which obviously satisfies the above properties. We 
will apply a series of transformations to S while retaining these properties until 
eventually we reach a point where every formula in S is simple (in a sense we 
will make precise later) and then we will construct a model with the promised 
number of states for 0. 

While possible we apply the following rules to S: 

1. If there exists a formula 0j g S such that 0j = 4>\ A <j)f then remove 0j from 
S and add (j>\ and 0^ to S. 

2. If there exists a formula 0j S S such that <fri — (f>j V 0f then remove 0i from 
S. If (f)\ is true in state s add 4>\ to S, otherwise add 0| to S. 

3. If there are two formulae 0^ = Oipi and <pj = Oipj in S then remove them 
and insert the formula □(V'i ^ipj)- 

It should be clear that rule one does maintain the properties of S. Rule two 
also maintains the properties: property one is maintained because we assumed 
that <pi is true in state S therefore if <j)\ is not true we add tfif which must be 
true. The other properties are also straightforward. Finally, rule three follows 
from the fact that D0i A D02 D(0i A 2 ) is a valid formula. 

It should be clear that applying all the rules until none applies will take 
polynomial time. When we can no longer apply the rules we have that S = 
{□^j 001, • ■ ■ , O0fe, h, ■ ■ ■ , lm}, where the k are prepositional literals; in other 
words, we have (at most) one formula that starts with a □. 

Now we will use induction on the diamond dimension to prove our theorem. 
Let s(d) be a function which upper bounds the number of states in the smallest 



model which are needed to satisfy formulae of depth d (we are going to calculate 
s(d) recursively and prove that it is finite). First, we can say that s(0) = 1, 
because a formula with diamond dimension has no diamonds. Therefore, S 
contains one formula that starts with a □ and some literals, for which there 
exists an assignment to make them all true (because of the first property of S). 
Clearly, a model with just one state where we pick this assignment will also make 
the formula that starts with □ trivially true, and by the second property of S 
will satisfy (p. 

For the inductive step, suppose that all the satisfiable formulae of dimension 
at most d<>(0) need at most s(d) states to be satisfied, where d is the formula's 
dimension. Let's consider the diamond dimension of all the formulae in S. There 
are three cases: either S docs not have a formula that starts with a □, or it 
doesn't have any formulae that start with 0, or it has both. 

Suppose that all the formulae in 5* are literals or start with 0- In this case, 
we have for all (pi that d<>(0i) < d<> (</>). Using the inductive hypothesis we get 
that the number of states to satisfy each formula (pi is at most s(do((pi)). Clearly, 
we can create a model which is the union of the models for all the (pi plus one 
state where we give an appropriate assignment to the literals and appropriate 
transitions so that 0</>i is true for all i. This model has at most l+^ i=1 s(d<>((pi)) 
states. 

If we have no formulae starting with diamonds we can easily see that the 
same model as in the base case suffices, since Dip is trivially true in a state 
without successors. So in this case we have just one state. 

Finally if we have both types of formulae in 5* we construct the following 
model: consider all the formulae ip A (pi, for all i. Clearly, they are satisfiable, 
because Dip A ()(pi is true in s. We know from the third property of S that 
d O (0) > d (yj) + k + £- = i do(&). Therefore, d (V A = d<>(V>) + d (</> 4 ) < 
d<>(</>) — k — ~}2j^i&Q(pj < d^(</>) — 1. Now, we take the union of the models 
for each ip A (pi, and each model has at most s(d — 1) states. We add one state 
and transitions to the appropriate states where ip A (pi are true, which together 
with an appropriate assignment makes all formulae of 5* true in that state. The 
number of states is at most 1 + k ■ s(d^(0) — 1). 

Using the simple fact that k < d<y(<p) we get from the above that s(d) is 
upper bounded by s(d) < 1 + d ■ s(d — 1) which gives that s(d) = 0(dl). 

Corollary 1. Given a modal formula (p with v variables and diamond dimension 
d<>(</>) — k we can solve the satisfiability problem for (p in time 0(2°( k ^' v ■ \(p\). 

Proof. It follows from the proof of the previous theorem that if <p is satisfiable 
there exists a model of a specific type which can satisfy it; specifically it can be 
satisfied in a model where the states are connected in a tree where the root has 
k children, each of which has k — 1 children, each of which has k — 2 children and 
so on. This tree has O(kl) states and exhausting all possible truth assignments 
to the variables in all the states and using the fact that model checking can be 
performed in linear time we get the stated running time. 



Let us now tackle the validity problem. The most straightforward way to 
check the validity of a formula is to check whether its negation is satisfiable. 
Diamond dimension is not likely to help us directly in this case because if a 
formula has low diamond dimension this does not imply that its negation also 
has low dimension. Therefore, we define a dual measure called box dimension. 

Definition 3. Let be a modal formula in negation normal form. Then its box 
dimension, denoted by drj(0) is defined inductively as follows: 

- dg(p) = drj(-ip) = 0, if p is a propositional letter 

- d n (0i V 2 ) = d n Oi) + d n (0 2 ), d n(0i A <h) = max{d n (0i),d n (0 2 )} 

- d n (D0) = 1 + d n (0), d n (O0) = d n (0) 

Theorem 4. For any formula we have d<>(0) = dn( _l 0). 

Proof. We use induction on the length of the formula. For formulae which are 
just propositional letters or literals it is obviously true. Now take a formula 0. 
If = Dip then d<>(0) = d (». Also, -.0 = O^V and d n (-.0) = drj(-.^). Thus, 
d<>(0) = drj(->0) by the inductive hypothesis. The proof is similar in the other 
cases. 

Corollary 2. Given a modal formula with v variables and box dimension 
drj(0) — k we can solve the validity problem for <f> in time 0(2°( k ^' v ■ \(j>\). 

4 Modal Width 

In this section we give another structural parameter for modal formulae called 
modal width in an attempt to solve modal satisfiability even more efficiently. 
We will show that satisfiability and validity can be solved in time only singly 
exponential in the modal width and v. 

First we define inductively the function s(<j>) which given a modal formula 
returns a set of modal formulae. Intuitively, whether <p holds in a given state 
s of a Kripkc structure depends on two things: the values of the propositional 
variables in s and the truth values of some formulae ipi in the successor states 
of s. These formulae are informally the subformulae of (f> which appear at modal 
depth 1. s(cj>) gives us exactly this set of formulae. 

- s(p) — if p is a propositional letter 

- s(-.0) = 5(0), 5(0! V <j> 2 ) = a(0i A 0a) = s(<Ai) U s(0 2 ) 

- s(DV>) = s(OV0 = W 

Now we inductively define the set Si(4>), which intuitively corresponds to the 
set of subformulae of at depth i. 



- 5 O (0) = s(0) 

- s,+i(0) = u v , eSl (0) s W 



Finally, we can now define the modal width of a formula <j> at depth i as 
mwi(</>) = \Si(4>)\ and the modal width of a formula as mw(0) = maxj mwj (</>). 

Before we go on, let us prove a basic observation regarding mw^) and 
md(</>). 

Lemma 3. For all i > md((f>) we have mwi{4>) = 0. 

Proof. Observe that for all formulae (f> such that md(0) > 1 we have md(</>) > 
max^, es (0) md(^). Using this fact the proof follows easily by induction on md(</>). 

Theorem 5. There exists an algorithm which decides the satisfiability of a modal 
formula </> with v variables, md{<p) = d and mw{(j)) — w in time 0(2 2v+3w -d-w ■ 
\<t>\)- 

Proof. We will need to use a function Prop((f>) which, given a modal formula 
<j), returns a propositional formula which corresponds to (f> with all modal sub- 
formulae replaced by new propositional variables. Prop{<p) can be inductively 
defined as follows: 

— Prop(p) = p if p is a propositional letter. 

— Prop(4>i Vfo) — Prop((j)i)V Prop(cp2) , Prop{<pi/\<p2) — Propyl) APropfa), 
Prop(-i0i) = -^Prop{(p\) 

— Prop(D(j)i) — qj, where qj is a new propositional letter. 

Notice that once again we consider ()<j) as shorthand for — >□ — k^>. 

Let P — {pi 1 p 2l ■ ■ ■ ,p v } be the set of propositional variables appearing in 
4>. For all i e {0,...,d- 1}, for all P> C P and for all S' C we de- 

fine the formula F(i,P',S') = (A Pi£ p'Pi) A (A Pi(E p\p' A (A^eS' ^) A 

(A^. i GS i (0)\s / • Clearly there are at most 2 V+W d formulae F(i,P',S') de- 
fined and for each one of these we will compute whether it is satisfiable or not 
using dynamic programming. We will use a boolean matrix A(i,P',S') of size 
2 V+W d to store the results. 

First, we have Sd(4>) = 0- It is not hard to see that all formulae F(d, P', 0) are 
indeed satisfiable, so we initialize the corresponding entries in A to True. Suppose 
now that for some i we have filled out completely all entries A(i + l,P',S'). We 
will show how to fill out any position in row i, say position A{i, P' , S'). The 
crucial part now is that if we consider the formula Prop(F(i, P' , S')), it will 
have some new variables qi which correspond to modal subformulae which all 
appear in S^+i (</>). 

The formula Prop(F(i, P', S')) has at most v + w variables. It is not hard to 
see that if F(i, P', S') is satisfiable, then Prop(F(i, P' , S')) is also satisfiable, so 
our first step is to check this. The truth assignments for the v variables are easy 
to infer, therefore we only need to go through the 2 W possible assignments for 
the new variables. For each satisfying assignment we find we then need to check 
if a model that satisfies F(i, P', S') can be built from it. 

So, suppose that Q is the set of new variables, and we have found an as- 
signment which sets the variables of Q' C Q to true and the rest to false and 



satisfies Prop(F(i, P' , S')). Each variable qj of Q corresponds to a formula D(j)j 
with cj>j G Si+i(4>) U P. If qj G Q' we must make sure that <f>j is true in all suc- 
cessors of the state s where F(i, P', S') will hold, in the model we are building. 
Let S" C Si + i((f)) UP be the set of formulae <j>j which we conclude that must 
hold in all successors of s in this way. 

If qj Q' we have that -O0j must hold in s, thus s must have a successor 
where ^cf)j is true, or equivalently <f>j is false. Let S* C Si+i((j>) U P be the set 
of formulae 3 for which we conclude that they must be false in some successor 
of s in this way. 

To decide if it is possible to build appropriate successors to s so that all 
these conditions are satisfied, we look at row i + 1 of A. Specifically we consider 
the set of entries A(i + 1, P', S') such that S" C S' U P' and A(i + 1, P', 5") = 
T. Informally, these correspond to formulae which are satisfiable (because the 
corresponding entry is set to true) and which also can serve as successors to s 
without violating the conditions of 5"', that is, in any state where they hold all 
formulae which we need to be true in all successors of s are indeed true. Now, we 
simply check if for each qj G S* there exists an entry in the set we have selected 
so far with qj £ S' U P' . If this is the case we can conclude that F(i, P', Q') is 
satisfiable and set the corresponding entry of A to True, otherwise we conclude 
that no satisfying model can be built from the assignment we get from Q, even 
though Prop(F(i, P', S')) is satisfied. This whole process of computing S" and 
S* and checking through row i + 1 of A can be performed in time 0(w ■ 2 V+W \(j)\). 

To decide if the initial formula <f> is satisfiable, we compute Prop((f>) and 
perform the same process: for every satisfying assignment of Prop{<p) we look 
at corresponding entries of row of A to see if a model for <j> can be built. The 
total time for this algorithm is 0(2 3w+2v wd\(f>\), because for each of the at most 
2 V+W d entries of A we need to check through at most 2 W assignments and for 
each we spend at most 0(w ■ 2 V+W \<p\). 

5 Conclusions and Open Problems 

In this paper we defined and studied several modal formula complexity measures 
and investigated how each can be used to attack cases of modal satisfiability. 
Our results show that proving fixed-parameter tractability is only a first step in 
such problems, because the dependence on the parameters can vary significantly 
and some parameters offer much better algorithmic footholds than others. 

It is worthy of remark that the measures of formula complexity we have 
discussed are not directly comparable; for example it is possible to construct a 
formula with small modality depth and very high modal width, or vice-versa. 
In this sense it is not possible to infer solely from our results which formula 
complexity measure is the "best" , since each corresponds to a different family of 
modal formulae. However, our results can be seen as a first attempt at drawing 
a complexity "map" for different modal formula parameters, looking for areas 
where satisfiability becomes more or less tractable. This perspective creates a 
nice connection between this work and for example the research area of graph 



widths, where the complexity of model checking problems on graphs is explored 
in different graph families depending on a graph complexity measure. This is a 
well-developed area whose insights may be applicable and helpful in the study 
of the problems of this paper. (For a summary of the current complexity "map" 
for graph width parameters see Figure 8.1 in [8]) 

Possible future directions are the investigation of yet more natural formula 
complexity measures and attempting to improve the running times or to show 
good lower bounds for the already known measures. Finally, extending our results 
to other modal logics, such as modal logics where Kripke structures are required 
to be reflexive or transitive (e.g. S4) would be an interesting next step. 
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